This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
File:                     uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft (raw, json)
Hash identifier:          5/hPC9I7jcyPAvCGFHDbjqt/7T/RpPH/QQbOyHqHqZk=
Subject key identifier:   FE:8C:51:0A:B3:AD:E4:14:42:29:9D:E6:E1:4C:1E:4A:2B:E2:35:02
Authority key identifier: B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6
Certificate issuer:       /CN=b945674f01fec565971c950f3512165c43ffdfb6
Certificate serial:       019C42465C1C15AB47678B4AB857E1B7DBE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
Manifest number:          089F
Signing time:             Mon 09 Feb 2026 12:00:33 +0000
Manifest this update:     Mon 09 Feb 2026 12:00:33 +0000
Manifest next update:     Tue 10 Feb 2026 12:00:33 +0000
Files and hashes:         1: FxpOpLtK88tsOun050YE0ZfdIDo.roa (hash: +btXumZU2TUmANl1EByq4FAyXjWIcRex9I8hhT7VPvA=)
                          2: uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl (hash: LhkuBUpdVlKi5syUCy76Op/jjDSnsrHbxnN2OiF1f1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 10 Feb 2026 12:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:42:46:5c:1c:15:ab:47:67:8b:4a:b8:57:e1:b7:db:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b945674f01fec565971c950f3512165c43ffdfb6
        Validity
            Not Before: Feb  9 12:00:33 2026 GMT
            Not After : Feb 10 12:00:33 2026 GMT
        Subject: CN=fe8c510ab3ade41442299de6e14c1e4a2be23502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:be:30:f7:68:10:bd:0f:b4:73:a5:d3:33:
                    8d:3e:8c:9d:80:bf:8f:70:e6:d4:16:f8:e3:e9:53:
                    4c:9c:1f:59:f9:ec:39:09:9a:87:49:da:3c:1b:f7:
                    36:66:1e:3c:d8:fd:ac:59:d3:94:31:0d:6f:d7:89:
                    34:95:a6:48:48:14:90:f2:1b:ae:f4:e8:6c:10:2c:
                    77:3d:42:fe:8b:6f:94:db:6e:b8:63:31:91:16:7b:
                    7a:49:79:25:da:b0:8b:dc:63:74:78:65:cb:52:2f:
                    76:67:be:4e:a7:78:98:21:fb:b0:ea:07:42:c9:d8:
                    2c:a7:1f:6a:e1:c7:72:43:ca:02:51:9d:f7:1d:8d:
                    5e:ea:ab:1e:a6:86:ac:cc:af:0f:cc:7e:94:d1:37:
                    d6:4c:9c:88:c6:ed:21:4a:de:e3:f7:3a:4b:a6:da:
                    f7:24:46:83:3f:f8:30:3d:f6:e5:2e:98:34:43:94:
                    ac:77:92:2a:44:9e:ef:1a:a2:e6:b3:ae:5c:4f:dd:
                    89:2d:09:77:ed:db:0a:e2:ed:0d:e6:ce:5e:c2:0f:
                    45:30:25:d2:ef:90:8d:25:fd:dc:ae:02:54:12:37:
                    4a:ba:b4:b9:f9:61:31:76:5b:51:a0:a1:74:21:24:
                    e9:49:88:12:ba:bf:08:05:39:5f:e1:7c:7c:15:ee:
                    51:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:8C:51:0A:B3:AD:E4:14:42:29:9D:E6:E1:4C:1E:4A:2B:E2:35:02
            X509v3 Authority Key Identifier:
                keyid:B9:45:67:4F:01:FE:C5:65:97:1C:95:0F:35:12:16:5C:43:FF:DF:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUVnTwH-xWWXHJUPNRIWXEP_37Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/48ebf4-9722-45d6-ac75-553cb7769ca9/1/uUVnTwH-xWWXHJUPNRIWXEP_37Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:22:de:71:e7:52:fd:1e:4c:36:eb:dc:ac:d4:3a:63:8a:ce:
         bf:1b:2a:11:3f:46:fe:82:40:9d:17:3f:ba:1c:14:09:c0:ee:
         1c:52:0d:01:37:84:1e:21:31:5d:af:6c:84:d8:55:d3:0a:5c:
         ad:c5:20:9e:07:28:d1:19:af:c3:e2:3b:fc:6d:d4:27:b4:6c:
         ba:f0:0e:1e:51:cc:44:84:08:1d:ee:a3:58:32:41:ab:37:78:
         93:4d:af:80:e7:df:e0:74:55:d1:69:d5:66:86:87:35:5d:a3:
         43:71:25:3e:92:37:6a:58:40:72:cc:04:8e:5a:9a:da:43:db:
         c3:6d:0c:52:9b:00:3b:26:e9:43:93:16:49:59:c7:b0:bb:92:
         83:03:23:80:5d:81:07:dd:91:5c:96:bc:e3:a8:48:24:c7:88:
         df:64:bf:67:a3:91:51:ac:5d:10:a9:42:20:9c:71:54:b1:70:
         9d:19:36:57:24:a7:14:b5:ff:23:20:42:1e:11:df:93:6a:35:
         58:d4:d4:ba:00:af:f7:71:86:3e:25:55:47:21:ec:22:b2:5e:
         75:ca:aa:9d:5b:d0:73:1b:df:00:cc:fd:ba:76:92:c0:41:74:
         93:15:bc:5b:50:2a:ed:a3:d6:39:b6:42:96:bf:30:b8:7a:dc:
         ce:be:8d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 9 21:07:13 2026 by rpki-client